PayPal Message scam checker
Fake PayPal messages claim a payment, problem, or limitation to make you click. Check a message below.
Check message privately
Runs in your browser. No login. Message not stored.
Message checked
You can edit it and run the check again.
Your result will appear here
Paste a message and choose Check message to see your safety guidance.
- A calm risk level
- Red flags found
- Safe next steps
- Official reporting links
- A family-safe summary
Your pasted message is not shown in shared or printed summaries.
Common PayPal Message scams
- Fake "you've received a payment" emails
- Fake invoices or money requests
- Account-limitation or verification phishing
- Requests to ship goods before money clears
Red flags on PayPal Message
- Pressure to ship before funds are truly available
- Links to log in instead of opening the app directly
- Sender addresses that are not the official domain
- Requests to send money to "reverse" a payment
Safety tips
- Log in by opening the official app or website yourself.
- Confirm payments inside your real account, not via email.
- Report phishing to the provider's official abuse address.
- Never ship goods based only on an email confirmation.
Related scam types
PayPal scamA scammer imitates PayPal to make you log in to a fake page, pay a fake invoice, or call a fake support number.PhishingPhishing is when a scammer pretends to be a trusted person or organisation to trick you into revealing passwords, codes, or financial details, or into clicking a malicious link.Fake payment confirmation scamA scammer sends a forged payment receipt or email so you believe you have been paid.
Related scam-type hubs
Related red flags
Glossary terms
Frequently asked questions
How do I check a PayPal Message message for scams?
Paste the PayPal Message message into the checker on this page. It runs in your browser and shows the red flags, what the message is likely trying to do, and safe next steps.
Is it safe to paste a PayPal Message message here?
Yes. The message is analysed on your device and is not stored or sent to a server by default. Sensitive details are masked before analysis.